DevSecOps Engineer, Python, CI/CD

Jobtailor; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Job summary

Jobtailor is seeking a DevSecOps/Platform Engineer to own secure delivery paths for federal systems in AWS or client environments. You will build CI/CD pipelines with automated security gates and policy checks, and create reproducible IaC with containerized environments and secrets management.

The role requires 4+ years in DevSecOps, a CS-related degree, and hands-on scripting with Python/Bash, plus cloud automation using CodePipeline/CodeBuild or GitHub/GitLab actions.

Qualifications

• 4+ years of DevSecOps or platform engineering experience.

Responsibilities

• Own a secure delivery path for federal systems.
• Build CI/CD pipelines with automated security testing (SAST, DAST, SCA), policy-as-code checks, controlled promotion, and review evidence
• Build reproducible infrastructure-as-code environments with containerization, container-image scanning, least-privilege access, secrets management, and encryption
• Implement monitoring, logging, vulnerability scanning, progressive delivery, blue/green and canary deployments, automated health checks, and rollback
• Handle incident response, pipeline reliability, and software-delivery performance metrics
• Produce evidence supporting Authority to Operate (ATO) authorization and continuous monitoring
• Work in Amazon Web Services or client-managed on-premises environments
• Help create new capabilities, tools, and lines of business

Skills

CI/CD automation

Infrastructure as Code

Automated security testing

Python scripting

Bash scripting

Git-based version control

Monitoring & logging

Vulnerability scanning

Containerization

Secrets management

Education

Bachelor’s degree in Computer Science or related field

Tools

AWS

CloudFormation

Terraform

Kubernetes

HashiCorp Vault

AWS Secrets Manager

GitHub Actions

GitLab CI

CodePipeline

CodeBuild

Job description

• Own a secure delivery path for federal systems
• Build CI/CD pipelines with automated security testing (SAST, DAST, SCA), policy-as-code checks, controlled promotion, and review evidence
• Build reproducible infrastructure-as-code environments with containerization, container-image scanning, least-privilege access, secrets management, and encryption
• Implement monitoring, logging, vulnerability scanning, progressive delivery, blue/green and canary deployments, automated health checks, and rollback
• Handle incident response, pipeline reliability, and software-delivery performance metrics
• Produce evidence supporting Authority to Operate (ATO) authorization and continuous monitoring
• Work in Amazon Web Services or client-managed on-premises environments
• Help create new capabilities, tools, and lines of business

Requirements

• 4+ years of DevSecOps or platform engineering experience
• Bachelor’s Degree in Computer Science or related field
• Hands-on CI/CD pipeline automation with security gates, AWS-native (CodePipeline, CodeBuild) or comparable (GitHub Actions, GitLab CI)
• Infrastructure-as-code (CloudFormation or Terraform) and containerization
• Automated security testing (SAST, DAST, SCA) and vulnerability scanning
• Scripting in Python or Bash
• Git-based version control
• Monitoring and logging
• Basic proficiency in writing, PowerPoint, and Excel
• Sole United States citizenship
• Ability to obtain a Public Trust determination
• Ability to commute into Washington, DC regularly
• Preferred: Federal security experience supporting FISMA compliance, implementing NIST SP 800-53 controls, and ATO support
• Preferred: Amazon Web Services certification
• Preferred: Kubernetes
• Preferred: Secrets management (HashiCorp Vault, AWS Secrets Manager, or comparable)
• Preferred: Experience applying zero trust principles
• Preferred: Software supply-chain integrity practice, including SBOMs and artifact signing
• Preferred: Federal information technology experience
• Preferred: Familiarity with AI-assisted developer tooling

Core Competencies

Demonstrates expertise in DevSecOps practices, including CI/CD pipeline automation, infrastructure-as-code, and automated security testing. Proficient in managing secure delivery paths for federal systems while ensuring compliance with FISMA and NIST standards.

Highest-signal resume keywords

• DevSecOps Experience
• CI/CD Pipeline Automation
• Infrastructure-as-Code
• Automated Security Testing
• Amazon Web Services

Hard Skills

• CI/CD Pipeline Automation
• Infrastructure-as-Code
• Automated Security Testing
• Scripting in Python
• Scripting in Bash
• Git-based Version Control
• Monitoring and Logging
• Vulnerability Scanning
• Containerization
• Secrets Management

Soft Skills

• Basic Proficiency in Writing
• Basic Proficiency in PowerPoint
• Basic Proficiency in Excel

Certifications & Qualifications

• Amazon Web Services Certification

Industry Keywords

• FISMA Compliance
• NIST SP 800-53 Controls
• Authority to Operate
• Zero Trust Principles
• Software Supply-Chain Integrity
• SBOMs
• Artifact Signing
• Federal Information Technology

Tools & Technologies

• Amazon Web Services
• CloudFormation
• Terraform
• Kubernetes
• HashiCorp Vault
• AWS Secrets Manager
• GitHub Actions
• GitLab CI
• CodePipeline
• CodeBuild